Personal Data Protection Policy (Privacy Notice) of Thonburi Healthcare Group Public Company Limited

Introduction

Thonburi Healthcare Group Public Company Limited (“the Company”) as the Data Controller realize the importance of the issue of any protections of personal data and you, as a user of the company, would like to will be secured in your personal data. Therefore, the company has established a policy of Personal Data which covers the ways in which the Company collects, uses and discloses your personal data. As the owner of personal data, The Privacy Notice is here to explain the details and methods of handling of personal information. The Company may make improvements or revise the personal data protection policy prescribed to comply with the service guidelines and in addition, if the Company makes any changes, amendments, additions, updates to this Privacy Notice, the Company will publish the changes. Modifications, additions, improvements on the Company's website pages, this will operate under the protection of personal data safely in all respects.

However, the Privacy Notice as part of the Terms and Conditions for Use of Products and Services, Access, Use of Content, Technology or Functions featured on this Site, as well as Applications. And any other services related to the company currently exists and/or that will make available in the future.


1. The definition

"Personal data" refers to the general personal data of the person who is not and/or Sensitive Personal.

"General personal data" means information about a person who can directly or indirectly identify that person, such as customer data, information or personal information such as name, surname, identity card number, picture on the ID card, age, date of birth, gender, bank account number, Credit card number, address Telephone number, E-mail, Education, Work, history, Financial, information Credit information Name, username and password, etc., including biometric data (Biometric) such as face pictures, fingerprints, photographs.

"Sensitive personal data" means personal data relating R about faith W nations. Nationality, religion, political opinions Criminal record Genetic information, biological information or any other information that affects the subject of personal data in the future. Similarly, according to the Personal Data Protection Commission's announcement,

“Personal Data Controller” means Thonburi Healthcare Group Public Company Limited, which has the authority to make decisions on the collection of personal data. Use or Disclosure of Personal data.

"Processing" means the collection, use, and disclosure of Personal data.


2. Sources of Personal data.

The company may receive your personal data through the following ways:

2.1 The company receives personal data from you directly. The company will collect your personal data from the service process as follows:

2.2.1 Procedure for applying for the service or the process of applying for various rights with the Company from both offline channels and online channels including website and social media

2.2.2 with your consent / consent in making a questionnaire (Survey) or correspondence by e-mail or other communication channels between the Company and you.

2.2.3 From the use of the service or products relating to their dealings with the service or in the form of a profile element of R(Profiling)

2.2.4 Using data collected through the company's website Browser's cookies in your

2.3.5 from the acquisition of goods and service Via channels online such as the company's website the online platform booth promotional activities of the Company

2.2 The Company has received the personal data of the third party which R has the right to disclose your personal lawful representatives and subcontractors that companies use to R. Help the company to apply for services and provide services to you by receiving information via email electronic mail or by receiving notification by phone or various forms of online communication or receive a document in which, where has the right to disclose personal data by lawful.


3. Personal data that the company collects

The company collects directly and indirectly the following personal data from you:

Identifiable data: name, surname, photo, gender, date of birth, passport number, ID card number

Contact data: address, phone number, email

Data to register for the service which is an appointment with medical professionals

Data concerning marketing information and news subscription: a registration to receive promotional information

Statistical data: numbers of patients and website visitors

Website usage data: IP address and cookies

Health data: health treatment records (medicine, lab, X-ray), health check-up reports, vaccination records


4. and base the purpose of processing personal data

4.1 The purpose of processing personal data.

The company processes your personal data for the following purposes:

4.1.1 To register you into THG Live which is the telemedicine service that enables you to receive the following services

Access to your health data

Your health treatment (medicine, lab, X-Ray)

Your health check-up reports

Your vaccination records

Access to hospital information

Services offered and service packages

List of medical professionals

News and updates from the hospital

Location of the hospital

Contact details of the hospital

Appointment service

Push notification of the appointment on THG Live

Push notification of the appointment on Line OA

Linking THG Live with Line OA

To use various functions of THG Live on Line OA

4.1.2 for the benefit of assertions or identifying your identity when accessing the Company's services such as booking, booking confirmation, checking of your previous booking reports, sending information to insurance companies. Sending information to people Provides financial services, etc.

4.1.3 To increase efficiency and improve the service in various areas such as customer relationship service. Responding to management needs of your service request, etc.

4.1.4 To communicate via telephone, text message, multimage text, e-mail, post, electronic mail and/or through any channel to r inquire or inform you or survey opinions or inform any other information that relates to the provision of the Company's services as required.

4.1.5 for any other benefit related to the Company's business operations, for example, for Research studies, statistics, development, marketing planning analysis services. Marketing activities or relevant targeted advertising Including the delivery of content, advertising, public relations activities, and promotions, as well as providing appropriate advice to R Provide services that match your interests.

4.1.6 To facilitate the notification. Submit documents and / or payment of any applicable fees. With products and services to you.

4.1.7 for entering an/or to perform the contract Including compliance with the terms of service of the company

4.1.8 to provide after-sales service. Providing services as requested by you, responding to inquiries, supporting use, providing information, receiving complaints, and resolving various problems and obstacles.

4.1.9 for the security of the establishment and its branches, such as monitoring Video exam of CCTV.

4.1.10 Rto record the conversation and / or communication between the Company and any of the R, such as e-mail, electronic mail for the purpose of developing communications management and / or other services of the Company.

4.1.11 to resolve disputes, recall, recalls. W

4.1.12 For the safety or the cessation of danger to life, body, or health of the person.

4.1.13 For other purposes as Law authorizes the collection. Collected, used or disclosed without consent from you which owns personal data.

4.1.14 policy actions within the Group of affiliated entities affiliated.

4.1.15 services of the Group, affiliates, affiliates, corporate affiliates an/or any other legal entity that the company is a party or have legal relations, which may Are in Thailand or abroad, if after the company changes the purposes for the processing of personal data the company will notify you Through the company's website https://www.thg.co.th / or any other channel that R Company determines which R can access easily.


4.2 Base for the processing of personal data.

4.2.2 Consent base

The company must obtain the consent of you, the data subject, before processing the personal data under this consent basis. You may do so through the Company's contact channels in accordance with Clause 5. However, the withdrawal of consent will not affect the processing of the personal data that you have lawfully given your consent. And the company would like to inform you that the impact that you may have from withdrawing your consent is as follows:/p>

1) You may be restricted to use certain services of the Company. Or get less convenience in receiving services from the company.

2) May result in the company being unable to provide service. Or offering certain products and services to you If such personal data contains the necessity of the company to provide the service to you.

4.2.3 Legal duty

It is necessary for the company to process your personal data in accordance with the legal obligations such as the Act. By committing a computer fault The Cybersecurity Security Act Protection Act Personal data Electronic Transactions Act Anti-Money Laundering Act Civil and Commercial Code Criminal Code the Revenue Code, etc., including an order of the Court, a judgment or an order of any other government agency. And / or any other laws where R is in force. And / or where R will be amended in the future.

4.2.4 Base necessary for R's legitimate interest.

It is necessary for the company to process your personal data on a legitimate basis. By processing the information under the above bases is the processing of personal data for your benefit, third parties and / or for the purpose of. Company favor Unless such benefits are It is less important than the basic rights of your personal data. In which personal data the company will process personal data under a legitimate interest base, for example:

(a) the transfer of your personal data within the company. To follow the company's working methods. The company will forward Your personal data between parties and operating within the company which is the processing of your personal data in accordance with Company operations procedures

(b) third party processing of personal data to consider the welfare of the company to employees and the families of employees which R d processing of personal data to R benefit of their respective owners’ personal data which R is an outsider and does not affect the right of privacy of the personal data terminal W


5. Characteristics. Personal Data Collection and Storage Personal data

5.1 Data Collection Characteristics

The company stores personal information in (hard copy) and / or electronic (soft copy) system with effective security measures. To prevent loss, access, use, alteration, alteration, or disclosure of personal data without authorization or unlawful authorization.

5.2 Period of personal data storage.

The company will retain such personal data for as long as r is necessary for such purposes. Above only or within the period when there is a contract or legal relationship between you and the Company. Or within time Legal Claims of the Parties Or the enforcement of legal rights or the lifting of the fight against the law of the company through the expiration of the storage period of personal information or the company has no right or cannot claim the base on the data processing. Your person already the company will delete or destroy personal data. Or make personal data unable to Identify the person who is the owner of the personal information within Reasonable time.

6.2 The right to access personal information.


6. channels of contact

You can contact the company. Or the Company's Data Protection Officer (DPO) can request processing of your personal data in accordance with the rights that R may have. The contact channels are as follows:

6.1 Data controller of Personal data
//ถึงนี้แล้ว

Company : Thonburi Healthcare Group Public Company Limited

Location R Contact : 34/1 Itsaraphap Rd, Ban Chang Lor, Bangkok Noi, Bangkok 10700

Contact channel : Tel : 024872000

Email : communications@thg.co.th

Website : https://www.thg.co.th

6.2 Information of the Personal Data Protection Officer

Name : Thonburi Healthcare Group Public Company Limited

Place R Contact : 34/1 Itsaraphap Rd, Ban Chang Lor, Bangkok Noi, Bangkok 10700

Contact channel : Tel : 024872000

Email : communications@thg.co.th

Website : https://www.thg.co.th

7. Rights of Personal data Subject

We will be able to collect, store, use, publish or otherwise process your personal data on a Lawful processing of personal data under the Personal Protection Act 2019 , you have the right to:

7.1 Right to withdraw consent

You have the right to withdraw your consent for the processing of your personal data where G you have consented to the company at any time. How long your personal information G has been with the Company

S: We would like to inform you that the provision of personal data data is incomplete. Or not giving consent to processing Personal information S may restrict your use of certain Company services. Or resulting in the company unable to provide services If you have the personal data that is necessary for the company to provide you with services

7.2 The right to access personal information.

You have the right to access your personal data. And to obtain a copy of your personal data, which is the Company's responsibility, including requesting that the company disclose the acquisition of your personal data that has not given consent for the processing of personal data.

7.3 The right to edit your personal information is correct.

You have the right to request the company to modify it. Or add personal information to be correct, current, complete, and not misleading.

7.4 Right to request erasure. Destroy personal data

You have the right to request the Company to delete or destroy your personal information that the company maintains or let the company do so Personal information such as personal information that is not personally identifiable, owns personal data in the event as follows:

(a) revoke your consent or oppose the collection, use or disclosure of personal information about you

(b) when is not necessary for to collect, use or disclose personal information for the purposes for which has given you your consent.

(c) when Company does not comply with the law relating to involves the protection of personal data

7.5 the right to suspend the use of personal data.

You have the right to request that the company temporarily suspend the use of your personal data. If the company is in the process of fact checking or investigating your objection. In addition, if you have the right to request that the company delete it. Or destroy your personal data, you may ask the company to stop using your personal data instead of deleting it Any damage or

7.6 obtain the right to ask them to send or transfer personal data.

You have the right to or ask the company to send or transfer your personal data to another data controller, G or other agency requested by G.

7.7 Right to object to processing of personal data.

You have the right to object to the collection, use, collection, and disclosure of your personal data about you. If the personal information is storage company by exemption without the consent of the personal data owner A person is necessary for the legitimate interest or a base of legitimate interests any personal information or personal information is collected, used or disclosed for direct marketing or research.

7.8 Right to complain.

In case that company or employees of the Department contravening or failing to comply Personal Data Protection Act BE 2562 or notice issued under this Act, you can appeal to the Office of Privacy Protection

The company. Collect, use and disclose the personal information of minors. Virtual person incompetent and / or incompetent persons in the event that the legal representative, guardian or guardian (As the case may be) has given consent only. S The Company intends to collect, use and disclose personal information from the person mentioned above. Without obtaining consent, according to the law, the company will delete such personal information. Unless the company has a legal right to collect, use and disclose personal information.

8. Type of person or an agency where the personal information collects may be disclosed.

The Company may disclose the personal information that has collected and collected to individuals, entities and entities as defined by as follows:

8.1 Companies in the group. Affiliates, sAffiliates only for the purpose of claiming legal rights or for the legal compliance but will not disclose your health data

8.2 Service providers that the company provides services to the Company: The Company may disclose your personal data to service providers that G provides services to the Company. The service provider will use the personal data of as the Company licenses which will be revealed only at needed only.

- the professional advisors such as the Financial Advisor. Legal Advisor

- Infrastructure Service Provider S Foundations and Information Technology

- Storage Service Providers Including cloud service providers

- Marketing service providers This includes service providers to prepare data and statistics.

- Advertising service providers. Public relations work and communication

- Service providers that related to payment systems and networks

- Payment agents

- Financial institutions that companies use to provide services to you

- Data verification service provider

Including any other entities that Company is a party to or have legal relations, which may resides in Thailand or a foreign country such individuals or juristic persons may is in a country where does not have adequate standards for the protection of personal data, but the Company will take steps to ensure that individuals or a juristic person data There is a system to maintain data that is safe and secure

8.3 Affiliate of the Company that has an alliance agreement with the Company

8.4 Assignee And / or Page from the company

In the event that the Company wishes to transfer rights and duties This includes partial or complete transfer of business, merger, and change in the Company's shareholding structure. It is necessary for the company to disclose your personal data to the transferee. (Including those has the possibility that will be the transferee)

8.5 Persons or entities as required by law

Where has laws, rules and regulations related to Government agency order agency has a duty to regulatory or court order.

9. Collection and use of personal data in the form of (cookies).

Company may access personal information about interests. And / or your preferences and / or your browsing data by using S (Cookies)Company on the' s websites and applications for S to enable the Company to offer Services that meet your needs as much as possible Such personal information will be stored in the form of an S (Cookies) cookie due to the fact that G Company will send or display service information. Or offers that G is beneficial from the company to you Through the website, the Company is required to collect and use information that is applicable to your access to the website. In which such information will be stored in the form of an (Cookies) cookie, which is a sub-element of the information that the website sends to your browser. Which will save the data into the computer equipment and / or communication devices that G has access to, such as tablets, smartphones, etc. When you return to visit the Company's website for a later time. (Cookies) will allow the Company to manage Your interests It makes you come back to visit the Company's website more conveniently. (Cookies) is also used to measure the traffic of online services. Changes in the content Find according to your usage, both previous and current. Or for advertising and PR purposes. However, you can set your browser not to accept the Company's (Cookies) cookies. For more details, you can learn more (Cookies) can be obtained from https://www.allaboutcookies.org/ We may contact the advertising network that is a third party where is collecting IP addresses. And other information by using cookies S logs web server operations. Those outsiders will use this information. S in doing advertising about products and services. Where is in line with your interests (including advertising for other companies that is not affiliated with), you may see these advertisements on other websites. What are these processes that help the company manage to and compete according to the requirements However, you can choose not to receive information in that advertising network through the network itself.

10. Privacy Policy of other websites.

This Privacy Notice applies only to the provision of services and the use of the Company's website. Even through the channels on the company's website You must study and follow the Privacy Notice policy that appears on that website is separate from that of the Company is not responsible in Site

11. Security in the storage of personal information.

The company recognizes the importance of keeping the security of your personal information. The company has determined to have Appropriate measures to maintain the security of personal information; and Consistent with the confidentiality of Personal information, including limited access to your personal information from employees, employees, and representatives of the Company that G is not involved in to prevent loss, access, destruction, alteration or disclosure without rights or unlawful.